A Ransomware Law Has Finally Passed: Help Is on the Way

Oct 18, 2019 | Cyber Security, IT News

In light of a multitude of recent attacks on U.S. businesses, a new law was recently passed that is meant to aid organizations that are affected by ransomware. How will this law affect you and your company? Much of the burden will still fall on you to adhere to important safety guidelines and require you to keep a managed security service provider on deck in order to prevent dire security consequences from happening in the first place.

Still, this is good news overall, as it means the Senate is beginning to take cybersecurity more seriously. And additional help will be available to your business.

How Does the Ransomware Law Work?

The new ransomware law — officially titled “The DHS Cyber Hunt and Incident Response Teams Act” — would require the Department of Homeland Security to create teams tasked with providing guidelines and advice to organizations on how best to protect their systems from an outside attack. These teams would also offer other technical support, including incident-response assistance where needed. These services would be available to all public and private organizations upon request.

Why Do We Need a Ransomware Law?

Believe it or not, ransomware started out as little more than a buzzword. Now, it’s become an all-too-real facet of everyday life — especially for businesses and organizations. At nearly every level on a daily basis, American infrastructure is under constant attack from foreign entities. That statement may sound like paranoia, but it’s not.

The largest example of this year is what happened in Baltimore. The city’s computer system was hit with a ransomware infection in May, and it kept the city’s government crippled for over a month. Estimates put the cost to recover at over $18 million. The attack reportedly impacted vaccine production, ATMs, airports and hospitals. Likewise, the Atlanta city government spent over $17 million to recover from a ransomware attack.

Interestingly, small-to-midsize businesses are at the largest risk of all. But by an overwhelming majority, all these attacks are originating from other countries around the world, so it makes sense that government would need to step in.

Why Do Businesses Need an MSSP?

A Ransomware Law Has Finally Passed: Help Is on the WayHaving government aid in response to a ransomware attack is all well and good, but it’s by no means a panacea. Preventive action must be maintained and said action kept in a state of flux when it comes to cyber warfare. It requires constant monitoring and adaptation. A recent survey of IT professionals found that those working in the health-care industry were most likely to report a lack of preparedness for an attack. More than 50% believe their industry simply isn’t ready to handle the threat.

More reports are coming out daily, and these attacks are halting US businesses, hospitals and local governments in their tracks. Responsibility and vigilance from everyone are absolute musts if we expect to weather this storm.

 

Since 1995, Manassas Park, VA-based V2 Systems has employed local systems administrators, network engineers, security consultants, help desk technicians and partnering companies to meet a wide range of clients’ IT needs, from research, to implementation, to maintenance. Concentrate on your VISION…We’ll handle the TECHNOLOGY!

More From V2 Systems

Summer Cyber Risks: Why Attacks Spike When Teams Are Short-Staffed

Summer vacations, lighter staffing, remote work, and busy schedules can create cybersecurity gaps for small businesses and government contractors. This blog explains why attackers take advantage of short-staffed teams and what organizations can do to reduce risk during the summer months.

Why Security Awareness Training Fails and How to Fix It

Security awareness training often fails because it is too generic, too infrequent, or too disconnected from how employees actually work. This blog explains why annual training alone is not enough and how small businesses and government contractors can build a more practical, ongoing approach to cybersecurity awareness.

Cybersecurity Fatigue Is Real: How to Keep Employees Engaged Without Burnout

Employees play a critical role in cybersecurity, but constant warnings, training reminders, password prompts, and security alerts can lead to fatigue. This blog explains how small businesses and government contractors can keep employees engaged with cybersecurity without overwhelming them.

How Government Contractors Can Stay Secure During Disruptions and Staffing Gaps

Disruptions are unavoidable, but security gaps do not have to be. For government contractors, staffing shortages, PTO, turnover, shutdowns, and contract transitions can create real cybersecurity and compliance risk. This blog explains how GovCons can maintain security, protect sensitive data, and keep operations moving when key people are unavailable.

Backups Alone Are Not Enough: What True Recovery Looks Like in 2026

Backups are a critical part of business resilience, but they are not the same as recovery. In 2026, small businesses and government contractors need validated backups, tested recovery procedures, clear response plans, and secure restoration processes to keep operations moving when ransomware, outages, or system failures occur.

Free
Small Business Cybersecurity Checklist

cybersecurity checklist graphic